s5b-public/k8s
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Compare commits

merge into: s5b-public:main
Branches Tags
s5b-public:main s5b-public:docs/howto-bootstrap-cluster s5b-public:feature/cilium-ipv6 s5b-public:feature/fix-cilium-network s5b-public:feature/argocd-network s5b-public:feature/kubeseal-config s5b-public:fix/sealed-secrets-ns s5b-public:fixing/argocd-part-3 s5b-public:fixing/argocd-part-2 s5b-public:feature/sealed-secrets
...
pull from: s5b-public:feature/kubeseal-config
Branches Tags
s5b-public:docs/howto-bootstrap-cluster s5b-public:feature/cilium-ipv6 s5b-public:feature/fix-cilium-network s5b-public:main s5b-public:feature/argocd-network s5b-public:feature/kubeseal-config s5b-public:fix/sealed-secrets-ns s5b-public:fixing/argocd-part-3 s5b-public:fixing/argocd-part-2 s5b-public:feature/sealed-secrets

2 Commits
main ... feature/ku

Author SHA1 Message Date
Marcel Straub
a010a52df5 Added fetching pub and private SealedSecrets key 2025-09-07 15:46:11 +02:00
Marcel Straub
df98f3f211 Small helper to fetch current Kubeseal cert 2025-09-07 15:38:29 +02:00
2 changed files with 12 additions and 0 deletions
Expand all files Collapse all files

3
02-k8s/.gitignore vendored Normal file
View File

@@ -0,0 +1,3 @@
# Kube Seal backup
kubeseal.cert
kubeseal.key

9
02-k8s/fetch_kubeseal_certs.sh Executable file
View File

@@ -0,0 +1,9 @@
#!/usr/bin/bash
rm kubeseal.cert kubeseal.key 2> /dev/null
# public cert
(umask 0077 && kubeseal --controller-namespace=sealed-secrets --fetch-cert > kubeseal.cert)
# full cert backup
(umask 0077 && kubectl get secret -n sealed-secrets -l sealedsecrets.bitnami.com/sealed-secrets-key -o yaml > kubeseal.key)